2/ Level K contacted exchanges to recommend how they could patch their systems, though it is unclear how many have done so.
Show this thread
JUST IN: Cybersecurity firms Level K, Trail of Bits and IC3 found attackers could drain multiple exchanges of their ethereum holdings due to a loophole in the platform's code. Story to come.
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
You should probably say whether it is fixed or not.
-
My guess is they are talking about the vulnerability in the below tweet. Appears to have been fixed on all exchanges that had the implementation issue.https://twitter.com/matt_odell/status/1060956650444599298 …
-
yup, same vuln, should be patched! any exchanges that don't know about it please contact Level K, ToB, or us!
End of conversation
New conversation -
-
-
The vulnerability was communicated to the affected parties over 2 weeks ago, and "it is unclear" whether it is an active issue, because you have not received comment from those parties or perhaps do not know who they are.
-
For clarity, I helped connect
@levelk_io with@trailofbits, as they had a lot of the relevant contacts and extensive experience with responsible disclosure. I do not know the vuln because I was not relevant to resolving it (which is best practice), but it was handled quickly. -
If you disclose it now without confirming it is fully resolved, then that is on you. The last stage of the disclosure process is public disclosure.
-
A wild disclosure report appears!https://twitter.com/levelk_io/status/1065310068718088192 …
End of conversation
New conversation -
-
-
Phew!, I'm all in XRP ;)
-
So your basically all in on Air ?
-
Wtf does that even mean in your world ?
Just saying your stupid is all man. It’s okay, I’ll just walk outside for my Air. It’s free. Lol -
You're* stupid
-
Hahaha
$XRP bag holders are the best to mess with it’s okay little guypic.twitter.com/yr7g7JSh7A -
How’s ur ZRX doing ?
- 1 more reply
New conversation -
-
-
It’s too elaborate for all this bad news to be dropping at the same time to be coordinated, but this is getting ridiculous at this point
-
means their holdings are sold already. Nowhere to go but up
-
Someone is buying everything we sell.
End of conversation
New conversation -
-
- 1 more reply
New conversation
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.